AnMed ransomware disrupts systems and patient care
Public report preview
AnMed's malware incident kept computers, phones and clinical systems impaired, forcing paper workflows and leaving selected services closed or limited through July 31, 2026. A confidential hospital-screen image shows an encryption and data-theft demand linked by its Tor destination and tradecraft to Interlock, supporting high ransomware confidence and medium, unconfirmed actor attribution.
Recent incident intelligence
Paid member report preview
Unlock the complete incident report
New reports are available immediately to Sustainers, after 2 weeks to Supporters, and to everyone once they are more than 1 month old.
Sustainers help fund the research and verification behind the Cyber Incident Register while receiving immediate access to new reports.
See something that needs correction?
Signed-in members can report an error, update, or missing source.